0.85.1: 0.85 recut from Git

This is the 0.85 release codebase, but re-cut from Git after switching over from Subversion.

0.85 / 0.85.1

Fix TLS verification; find server by own hostname & SRV.

• TLS hostname verification was not actually happening. I'm mortified.
  • IO::Socket::SSL requirement bumped to 1.14 (was 0.97).
• By default, if no server specified, before falling back to localhost try to
  use the current hostname and SRV records in DNS to figure out if Sieve is
  available. Checks for sieve, imaps & imap protocol SRV records and honours
  target==. to mean "no".
  • This works better with the Mozilla::PublicSuffix module installed.
• Added ability to blacklist authentication mechanisms

In addition, TLS SNI should now be sent, with the expected hostname. This hostname is not the hostname connected to, but the last hostname found before going into DNS.

Since verification wasn't happening before, any hostname verification broken by this change gets treated the same as hostname verification broken by "turning on verification".

Packagers should note that this software should now recommend whichever package provides the Mozilla::PublicSuffix Perl module. It's not required, but automatic sieve hostname derivation works better/safer with it.